Apply on Employer Site

BNY · 2 weeks ago

Director, Audit Manager (Application Technology Audit)

New York, NY

Full-time

Onsite

Senior Level, Lead/Staff, Director/Executive

$127K/yr - $242K/yr

12+ years exp

BNY is a leading global financial services company influencing nearly 20% of the world’s investible assets. They are seeking a Director, Audit Manager (Application Technology Audit) to lead the Internal Audit team, develop risk-based audit plans, assess controls, and collaborate with various stakeholders to ensure effective technology audits.

Financial Services

Responsibilities

Develop and execute risk-based audit plans for critical applications and platforms, aligned with Enterprise and IT risk frameworks

Assess the design, implementation, and operating effectiveness of controls over: SDLC phases (requirements, design, development, testing, deployment), Change management and release processes, Application security (authentication, authorization, encryption), Data integrity, input/output controls, and backup/recovery procedures, User access provisioning, segregation of duties, and privileged access monitoring

Perform walkthroughs, test design and operating effectiveness, document findings, and prepare clear, actionable audit reports

Collaborate with application owners, developers, security, and operations teams to validate remediation plans and track issue resolution

Leverage data analytics and automated testing tools to enhance audit coverage and efficiency

Monitor emerging technologies, industry frameworks (e.g., COBIT, NIST, COSO), and regulatory requirements to update audit methodologies

Lead the end-end audit lifecycle, including planning, fieldwork, reporting, and issue validation

Evaluate the design and effectiveness of technology controls supporting key business processes such as payments, clearing, settlement, fraud detection, sanctions screening, and related infrastructure

Oversee risk assessments for technology systems and ensure emerging risks (e.g., AI/ML in payment monitoring, instant payments, ISO 20022 adoption, cloud migration, cybersecurity threats) are appropriately covered

Partner with business, technology, and risk stakeholders to assess the impact of regulatory requirements (e.g, PDS2, FedNow, SWIFT, Sanctions Compliance)

Manage and mentor audit managers and staff, fostering a high performance team culture with focus on technical depth, risk insights, and stakeholder impact

Ability to manage global projects on time and within budget

Experience with managing and motivating a global team

Qualification

IT auditingCybersecurityData governanceIT general controlsCloud technologyCISA certificationCISSP certificationCISM certificationAnalytical skillsCommunication skillsInterpersonal skillsTeam leadership